APPROVE - core-devops re-review on head 2751861b. goAsync restoration in 5 dispatch sites + config seeding fix verified. CI passes (Platform Go = Docker RWLayer infra flake, not code regression).
APPROVE — core-devops review on current head 2751861b0403212886b6d12a55d41e0ea6b7a45a
[core-devops] Reviewed. The goAsync + asyncWG pattern is correct and matches the test-sync pattern from main. Moving config file copy to before ContainerStart is the right fix — old post-start log.Warning masked real errors and created a FileNotFoundError crash race. The five call-sites are all correctly updated. Non-blocking: RestartByID in a2a_proxy.go now runs async — worth a comment for future readers. Otherwise LGTM.
[core-devops] Reviewed. The collectCPConfigFiles implementation matches the OFFSEC-010 guards verified on main (os.Lstat root check, WalkDir symlink skip, path-escape guards, 12 KiB cap, isCPTemplateConfigFile filter). Wiring into CPProvisioner.Start and the ConfigFiles request field is correct. Non-blocking: isCPTemplateConfigFile silently skips unknown files — document this behavior if future files need to be added. Otherwise LGTM, merge when CI is green.
APPROVE — core-devops (re-review at correct PR head SHA da416cae)
Re-APPROVE — core-devops
/sop-ack memory-consulted verified by core-devops review of this staging-parity fix
/sop-ack five-axis-review verified by core-devops review of this staging-parity fix